CVE-2020-20508

Name of the Vulnerable Software and Affected Versions: Shopkit version 2.7

Description: The issue is related to a reflective cross-site scripting (XSS) vulnerability in the /account/register component. This vulnerability allows attackers to hijack user credentials by injecting a crafted payload into the E-Mail text field.

Recommendations: For Shopkit version 2.7, consider disabling the /account/register component until a patch is available to prevent exploitation of the reflective XSS vulnerability. Restrict access to this component to minimize the risk of credential hijacking. Avoid using the E-Mail text field in the affected component until the issue is resolved.